git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@611957 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@611920 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@610832 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@610829 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@610396 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@609985 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@609486 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@609454 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@609444 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@609410 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@608867 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@608864 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@608255 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@608215 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@603601 13f79535-47bb-0310-9956-ffa450edef68

* src/modules/standard/mod_imap.c (menu_header): Fix cross-site
  scripting issue by escaping the URI, and ensure that a charset
  parameter is sent in the content-type to prevent autodetection by
  broken browsers.

Reported by: JPCERT


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@603597 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@595464 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy: Prevent reading past the end of a buffer when parsing
date-related headers.  PR 41144.

Reviewed by: Eric, JimJag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@590277 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@589648 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@589602 13f79535-47bb-0310-9956-ffa450edef68

change in common_init() will mean that mod_ssl won't cleanly
patch, so before we release, we'll need to make sure they
are aware.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@588214 13f79535-47bb-0310-9956-ffa450edef68

Current STATUS of 1.3.39 binaries: only Netware, mips-siemens-reliantunix5.4 and i386-sinix are built

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@577333 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@575751 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@572654 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@572647 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@571922 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@571619 13f79535-47bb-0310-9956-ffa450edef68

PR: 43233
Submitted by: IIDA Yosiaki <y-iida@secom.co.jp>



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@571270 13f79535-47bb-0310-9956-ffa450edef68

copy of ImageMagic creates garbage transparent .png's).

PR: 30190
Backport: r570373


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@570377 13f79535-47bb-0310-9956-ffa450edef68

and black backgrounds (to point out PR 30190).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@570372 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@570367 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@570222 13f79535-47bb-0310-9956-ffa450edef68

Sync with IANA registry.

Update common x-types that have been registered or will never
be registered for compatibility reasons.  Yeah, those x-Idiots.

The extensions recently assigned to application/vnd.apple.installer+xml
(dist distz pkg mpkg) are too numerous and too generic.  We should
always assume that vendors are too lazy to check for conflicts
(we choose .mpkg only, since that is the common one).

The extension recently assigned to ecmascript (.es)
interferes with languages (espanol), so replace with .ecma.
PR: 35550

Assign the .chm extension to the newly registered type based on
the theory that Microsoft will use it eventually.
PR: 37798

Add application/xspf+xml xspf since they are trying to do it right.
PR: 39317

Add svgz to list of image/svg+xml extensions as per W3C.
PR: 31483



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@570211 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@564627 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@564624 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@562731 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@562230 13f79535-47bb-0310-9956-ffa450edef68

PR: 33466


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@561440 13f79535-47bb-0310-9956-ffa450edef68

mod_status: Fix a possible XSS attack against a site with a public
server-status page and ExtendedStatus enabled, for browsers which
perform charset "detection".  Reported by Stefan Esser.  [Joe Orton]

Joe's patch was tweaked ever so slightly by me, then reviewed
by Joe and Sander T.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@559142 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553551 13f79535-47bb-0310-9956-ffa450edef68